Data Recovery & Computer Forensics Blog

Recently, we received a hard drive for investigation as part of litigation.  This drive had come from the work computer of an employee terminated by our client six months prior, now the subject of the litigation.

When we received the drive, it was apparent that it had been tampered with.  Hard drives typically come with stickers over one or more of the case screws.  These stickers are there to allow the manufacturer to void the warranty when the drive is opened by an unauthorized person.  In this case, the sticker was punctured and the screw was exposed.  Continue Reading »

There is a tendency in the electronic evidence field to lose sight of the fact that, although the battleground is different, the way the war is fought is the same.  Electronic discovery motions are still discovery motions, destruction of electronic evidence is still spoliation and computer forensic investigations are still investigations. Continue Reading »